CVE-2026-80774

HID: asus: fix missing hid_is_usb() check

N/A

Published: September 4, 2026 at 03:12 PM UTC

Updated: October 19, 2026 at 09:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hid_is_usb() check to_usb_interface() can only be used on a hid_device whose parent is really USB; uhid can create devices that identify as being on BUS_USB, but don't actually have a USB parent. Fix the use of to_usb_interface() without a hid_is_usb() check. I have verified that it is currently possible to trigger a kernel splat due to this bug in an ASAN build, and that this commit fixes the issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

90%

00e005c952f74f50a3f86af96f56877be4685e1402d5431198f10e7c6e31f4138c14cfe400ec55a70e5c952f74f50a3f86af96f56877be4685e142d5431198f10e7c6e31f4138c14cfe400ec55a76.12.35 6.15.4 6.16ff38cf0bd888fe15789a7193d07c4a876388d520

Vendor states this is fixed in 02bf61dfb44f17ec187d1da1a82495951bbd12df (fixed)

Vendor states this is fixed in 1ddc2f5913bec7a846544d51a8f7a8119573b2a1 (fixed)

Vendor states this is fixed in 8b5debb6252cd1e2b6c7adf8f95761a0e743d2cf (fixed)

Vendor states this is fixed in bdb2e0a2a359e473ca5619e35adee89028697239 (fixed)

Vendor states this is fixed in ee883906cf6685d753af9c2d2ca9fd6f63197726 (fixed)

Vendor states this is fixed in 6.12.108 (unaffected)

Vendor states this is fixed in 6.16 (unaffected)

Vendor states this is fixed in 6.18.49 (unaffected)

Vendor states this is fixed in 7.1.11 (unaffected)

Vendor states this is fixed in 7.2.1 (unaffected)

Vendor states this is fixed in 7.3 (unaffected)

Vendor states this is fixed in 7.3-rc1 (unaffected)